$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa File: 5cab320d-a4cf-396c-878a-4196119fbff5.roa (raw, json) Hash identifier: 6jIldRmOtUHWIKnzOs/PoWDqzKyyXnVFVf6zch+rLm4= Subject key identifier: 58:D7:BD:4E:BB:CF:E5:6B:45:31:7B:44:68:3E:D6:4C:B7:DB:1A:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CACF1B4CC87E05B48729679E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 19905 IP address blocks: 173.28.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:b4:cc:87:e0:5b:48:72:96:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=c3486c45-f05d-48bf-b01f-d416b750d154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:04:11:f8:5a:4c:79:31:e0:4a:1a:20:64:a5: 32:fc:67:e8:e3:ac:99:0a:01:e0:d5:bd:0d:2f:4e: 77:26:d2:2c:94:0c:37:ec:62:e6:20:c9:bf:cc:50: 80:b2:c7:ad:d0:03:59:d4:ac:72:05:52:7c:43:24: 5f:e1:ac:3e:b4:29:89:fd:b4:07:4f:7a:a9:e8:9c: 63:2b:31:57:38:ac:c0:93:eb:3f:68:73:29:a0:5c: 23:13:8a:b7:af:74:5f:dd:25:23:1e:da:3d:d9:c2: 9a:3f:47:6e:83:47:08:50:cf:ca:ba:86:65:20:94: 2a:c5:f4:5c:f9:91:a0:da:10:6b:ce:63:ee:86:98: 1b:90:71:16:b9:1b:01:9c:ae:ee:07:80:17:df:85: 9d:6e:02:fc:b2:8c:8f:b7:21:85:7c:ff:b8:3e:fd: ad:29:12:32:d9:f0:6b:64:2d:02:07:77:b1:14:c2: 3e:0f:7e:bf:3f:0d:22:59:b6:b6:fc:b8:be:f0:2e: 77:bf:d3:a7:1b:cf:19:53:68:dc:53:89:9a:8d:d0: f0:9b:21:c7:ca:3a:24:4c:ac:b7:73:1e:03:39:48: 01:08:dc:fc:19:94:5d:d0:20:e5:fc:45:16:f1:59: d9:6b:b3:fc:54:f6:da:6b:c6:4c:3f:dc:69:27:51: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D7:BD:4E:BB:CF:E5:6B:45:31:7B:44:68:3E:D6:4C:B7:DB:1A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f1:c3:01:d7:8b:5f:42:7a:87:1e:0c:18:04:cb:21:67:80: a1:88:d9:3c:59:0b:53:40:24:f8:3c:6b:6a:49:de:8a:ac:ff: 37:bf:68:85:3c:65:a3:e3:d5:76:92:25:2f:3b:c0:e2:21:e4: 86:16:bc:9c:b1:3d:33:fb:fb:59:2e:de:3c:c9:c6:fb:91:70: 5e:54:3a:6f:e5:97:61:a4:a9:27:60:e2:0f:3d:9f:99:65:4b: a6:3a:0f:96:ef:02:50:a7:0c:9a:f8:63:78:a6:1b:13:1a:0e: cb:99:e5:af:af:32:98:cf:21:59:42:0c:f0:33:7c:16:db:d6: 1c:7b:85:31:c0:44:08:93:25:d6:57:84:1b:62:74:fd:1b:a3: 20:8b:49:55:fd:9f:dc:75:11:d4:84:70:2b:d6:c4:06:aa:86: be:a1:21:79:5d:69:bd:d6:27:67:49:47:80:70:b9:5c:fb:9b: 1f:19:3a:29:a0:ef:65:b5:d9:4d:1c:a1:a2:0a:02:e8:0b:b6: 0b:19:f9:71:68:18:02:0a:14:f7:3d:2e:54:5b:69:00:df:be: 09:9b:5f:22:5c:18:fc:43:57:10:6a:f2:32:d9:cf:5c:bd:59: d4:fd:fa:71:70:65:90:ac:42:83:6e:d4:b1:7a:38:d9:ef:f4: 63:43:2b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8bTMh+BbSHKWeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YzM0ODZjNDUtZjA1ZC00OGJmLWIwMWYtZDQxNmI3NTBkMTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwQR+FpMeTHgShogZKUy/Gfo46yZCgHg1b0N L053JtIslAw37GLmIMm/zFCAsset0ANZ1KxyBVJ8QyRf4aw+tCmJ/bQHT3qp6Jxj KzFXOKzAk+s/aHMpoFwjE4q3r3Rf3SUjHto92cKaP0dug0cIUM/KuoZlIJQqxfRc +ZGg2hBrzmPuhpgbkHEWuRsBnK7uB4AX34WdbgL8soyPtyGFfP+4Pv2tKRIy2fBr ZC0CB3exFMI+D36/Pw0iWba2/Li+8C53v9OnG88ZU2jcU4majdDwmyHHyjokTKy3 cx4DOUgBCNz8GZRd0CDl/EUW8VnZa7P8VPbaa8ZMP9xpJ1GV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjXvU67z+VrRTF7RGg+1ky32xp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWNhYjMyMGQtYTRjZi0z OTZjLTg3OGEtNDE5NjExOWZiZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzxwwHXi19CeoceDBgEyyFngKGI2TxZC1NAJPg8a2pJ3oqs/ze/aIU8 ZaPj1XaSJS87wOIh5IYWvJyxPTP7+1ku3jzJxvuRcF5UOm/ll2GkqSdg4g89n5ll S6Y6D5bvAlCnDJr4Y3imGxMaDsuZ5a+vMpjPIVlCDPAzfBbb1hx7hTHARAiTJdZX hBtidP0boyCLSVX9n9x1EdSEcCvWxAaqhr6hIXldab3WJ2dJR4BwuVz7mx8ZOimg 72W12U0coaIKAugLtgsZ+XFoGAIKFPc9LlRbaQDfvgmbXyJcGPxDVxBq8jLZz1y9 WdT9+nFwZZCsQoNu1LF6ONnv9GNDK6I= -----END CERTIFICATE-----Generated at Sun Mar 1 23:15:09 2026 by rpki-client